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In the Claims : 

Please amend claims 61-63, as indicated below. 

1 . (Previously presented) A network management system, comprising: 

a gateway which is coupled to a plurality of managed objects and which is 
configured to deliver events generated by the managed objects to one or 
more managers or to deliver requests generated by the managers to one or 
more of the managed objects; and 

a platform-independent interface to the gateway, wherein the gateway is 
configurable to communicate with the managers through the platform- 
independent interface to deliver the events or requests; 

wherein the gateway is configurable to provide object-level access control 
between the managers and the managed objects to receive the events from 
or to send the requests to the managed objects, wherein said object-level 
access control is provided at the individual object level so that one of the 
managers is granted access to one of the managed objects while being 
prevented from interfacing with a different one of the managed objects. 

2. (Original) The network management system of claim 1, wherein the gateway 
is configurable to determine whether each of the managers is authorized to communicate 
with each of the managed objects. 

3. (Original) The network management system of claim 1, wherein the gateway 
is configurable to authenticate the managers to receive the events from or to send the 
requests to the managed objects as a fiinction of the identity of the managed object. 

4. (Original) The network management system of claim 1, wherein the gateway 
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is configurable to authenticate the managers to receive the events or send the requests as 
a function of user IDs entered by users of the managers. 

5. (Original) The network management system of claim 1, wherein the events or 
requests are delivered by the gateway through the platform-independent interface 
according to Internet Inter-Object Protocol (HOP). 

6. (Original) The network management system of claim 1, wherein the platform- 
independent interface to the gateway is expressed in an interface definition language, and 
wherein the interface definition language comprises a language for defining interfaces to 
the managed objects across a plurality of platforms and across a plurality of progranmiing 
languages. 

7. (Original) The network management system of claim 6, wherein the interface 
definition language comprises OMG IDL. 

8. (Original) The network management system of claim 1, wherein the managed 
objects comprise one or more objects corresponding to a telephone network. 

9. (Original) The network management system of claim 1, wherein the managed 
objects comprise an object corresponding to a telecommunications device. 

10. (Original) The network management system of claim 1, wherein the gateway 
is configurable to provide security audit trails. 

11. (Previously presented) The network management system of claim 10, 
wherein the gateway providing security audit trails comprises the gateway providing 
access to a logging service. 

12. (Previously presented) The network management system of claim 11, 
wherein the logging service is operable to log an ID of a user that receives each event or 
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sends each request. 

13. (Previously presented) The network management system of claim 11, 
wherein the logging service is operable to log an ID of the managed object that is the 
source of each event or the target of each request. 

14. (Previously presented) The network management system of claim 11, 
wherein the logging service is operable to log a time at which each event or request is 
generated. 

15. (Previously presented) The network management system of claim 11, 
wherein the logging service is operable to log a time at which each event or request is 
delivered. 

16. (Original) The network management system of claim 1, wherein the requests 
comprise a query for information concerning one of the managed objects. 

17. (Original) The network management system of claim 1, wherein the requests 
comprise a command to set one or more parameters of one of the managed objects. 

18. (Original) The network management system of claim 1, wherein the requests 
are converted from the interface definition language to a Portable Management Interface 
(PMI) format prior to delivery to the managed objects., 

19. (Original) The network management system of claim 1, wherein the requests 
are converted from the interface definition language to a platform-specific format prior to 
delivery to the managed objects. 

20. (Previously presented) A network management method, comprising: 
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sending an identity of a user of a manager application to a gateway, wherein the 
gateway is configurable to communicate with the manager application 
through a platform-independent interface; 

determining on a managed object level whether or not the manager application is 
allowed to receive an event generated by one of a plurality of managed 
objects or to send a request to the one of the plurality of managed objects 
as a function of the identity of the user of the manager application, 
whereby access for the manager application to receive the event or send 
the request is approved or denied for said one of the plurality of managed 
objects at the individual object level so that the manager application is 
granted access to one of the plurality of managed objects while being 
prevented from interfacing with a different one of the plurality of managed 
objects; and 

delivering the event to the manager application or the request to the managed 
object if the manager access is approved. 

21. (Original) The network management method of claim 20, wherein the 
gateway is configurable to determine whether the manager is authorized to communicate 
with the managed object. 

22. (Original) The network management method of claim 20, wherein the 
gateway is configurable to authenticate the manager to receive the event or send the 
request as a function as the identity of the managed object generating the event or 
receiving the request. 

23. (Original) The network management method of claim 20, wherein the 
gateway is configurable to authenticate the manager to receive the event or send the 
request as a fiinction of a user ID entered by the user of the manager. 
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24. (Original) The network management method of claim 20, wherein the event 
or request is delivered by the gateway through the platform-independent interface 
according to hitemet Inter-Object Protocol (HOP). 

25. (Original) The network management method of claim 20, wherein the 
platform-independent interface to the gateway is expressed in an interface definition 
language, and wherein the interface definition language comprises a language for 
defining interfaces to the managed objects across a plurality of platforms and across a 
plurality of programming languages. 

26. (Original) The network management method of claim 25, wherein the 
interface definition language comprises OMG IDL. 

27. (Original) The network management method of claim 20, wherein the 
managed object comprises an object corresponding to a telephone network. 

28. (Original) The network management method of claim 20, wherein the 
managed object comprises an object corresponding to a telecommunications device. 

29. (Original) The network management method of claim 20, wherein the 
gateway is configurable to provide security audit trails. 

30. (Original) The network management method of claim 29, wherein the 
gateway providing security audit trails comprises the gateway providing access to a 
logging service. 

31. (Original) The network management method of claim 30, wherein the 
logging service is operable to log an E) of a user that receives the event or sends the 
request. 

32. (Original) The network management method of claim 30, wherein the 
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logging service is operable to log an ID of the managed object that is the source of the 
event or the target of the request. 

33. (Original) The network management method of claim 30, wherein the 
logging service is operable to log a time at which the event or request is generated. 

34. (Original) The network management method of claim 30, wherein the 
logging service is operable to log a time at which the event or request is delivered. 

35. (Original) The network management method of claim 20, wherein the 
request comprises a query for information concerning the managed object. 

36. (Original) The network management method of claim 20, wherein the 
request comprises a command to set one or more parameters of the managed object. 

37. (Original) The network management method of claim 20, wherein the 
request is converted from the interface definition language to a Portable Management 
Interface (PMI) format prior to delivery to the managed object. 

38. (Original) The network management method of claim 20, wherein the 
request is converted from the interface definition language to a platform-specific format 
prior to delivery to the managed object. 

39. (Previously presented) A carrier medium comprising program instructions 
for network management, wherein the program instructions are computer-executable to 
perform: 

sending an identity of a user of a manager application to a gateway, wherein the 
gateway is configurable to communicate with the manager application 
through a platform-independent interface; 
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determining on a managed object level whether or not the manager application is 
allowed to receive an event generated by one of a plurality of managed 
objects or to send a request to the one of the plurality of managed objects 
as a function of the identity of the user of the manager application, 
whereby access for the manager application to receive the event or send 
the request is approved or denied for said one of the plurality of managed 
objects at the individual object level so that the manager application is 
granted access to one of the pluraUty of managed objects while being 
prevented from interfacing with a different one of the plurality of managed 
objects; and 

delivering the event to the manager application or the request to the managed 
object if the manager access is approved. 

40. (Original) The carrier medium of claim 39, wherein the gateway is 
configurable to determine whether the manager is authorized to communicate with the 
managed object. 

41. (Original) The carrier medium of claim 39, wherein the gateway is 
configurable to authenticate the manager to receive the event or send the request as a 
fimction as the identity of the managed object generating the event or receiving the 
request. 

42. (Original) The carrier medium of claim 39, wherein the gateway is 
configurable to authenticate the manager to receive the event or send the request as a 
function of a user ID entered by the user of the manager. 

43. (Original) The carrier medium of claim 39, wherein the event or request is 
delivered by the gateway through the platform-independent interface according to 
Internet Inter-Object Protocol (HOP). 
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44. (Original) The carrier medium of claim 39, wherein the platform- 
independent interface to the gateway is expressed in an interface definition language, and 
wherein the interface definition language comprises a language for defining interfaces to 
the managed objects across a plurality of platforms and across a plurality of programming 
languages. 

45. (Original) The carrier medium of claim 44, wherein the interface definition 
language comprises OMG DDL. 

46. (Original) The carrier medium of claim 39, wherein the managed object 
comprises an object corresponding to a telephone network. 

47. (Original) The carrier medium of claim 39, wherein the managed object 
comprises an object corresponding to a telecommunications device. 

48. (Original) The carrier medium of claim 39, wherein the gateway is 
configurable to provide security audit trails. 

49. (Original) The carrier medium of claim 48, wherein the gateway providing 
security audit trails comprises the gateway providing access to a logging service. 

50. (Original) The carrier medium of claim 49, wherein the logging service is 
operable to log an E) of a user that receives the event or sends the request. 

51. (Original) The carrier medium of claim 49, wherein the logging service is 
operable to log an ID of the managed object that is the source of the event or the target of 
the request. 

52. (Original) The carrier medium of claim 49, wherein the logging service is 
operable to log a time at which the event or request is generated. 
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53. (Original) The carrier medium of claim 49, wherein the logging service is 
operable to log a time at which the event or request is delivered. 

54. (Original) The carrier medium of claim 39, wherein the request comprises a 
query for information concerning the managed object. 

55. (Original) The carrier medium of claim 39, wherein the request comprises a 
command to set one or more parameters of the managed object. 

56. (Original) The carrier medium of claim 39, wherein the request is converted 
from the interface definition language to a Portable Management Interface (PMI) format 
prior to delivery to the managed object. 

57. (Original) The carrier medium of claim 39, wherein the request is converted 
from the interface definition language to a platform-specific format prior to delivery to 
the managed object. 

58. (Previously presented) A network management system, comprising: 

a gateway which is coupled to a plurality of managed objects and which is 
configured to deliver events generated by the managed objects to one or 
more managers or to deliver requests generated by the managers to one or 
more of the managed objects; and 

a platform-independent interface to the gateway, wherein the gateway is 
configurable to communicate with the managers through the platform- 
independent interface to deliver the events or requests; 

wherein the gateway is configurable to provide object-level access control 
between the managers and the managed objects to receive the events from 
or to send the requests to the managed objects, wherein said object-level 
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access control is provided at the individual object level so that one of the 
managers is granted access to one of the managed objects while being 
prevented from interfacing with a different one of the managed objects, 
and wherein the managers use a request Service Access Point (SAP) for 
requests and responses. 

59. (Previously presented) A network management method, comprising: 

sending an identity of a user of a manager application to a gateway, wherein the 
gateway is configurable to communicate with the manager application 
through a platform-independent interface; 

determining on a managed object level whether or not the manager application is 
allowed to receive an event generated by one of a plurality of managed 
objects or to send a request to the one of the plurality of managed objects 
as a function of the identity of the user of the manager application, 
whereby access for the manager application to receive the event or send 
the request is approved or denied for said one of the plurality of managed 
objects at the individual object level so that the manager application is 
granted access to one of the plurality of managed objects while being 
prevented from interfacing with a different one of the plurality of managed 
objects; and 

delivering the event to the manager application or the request to the managed 
object if the manager access is approved; 

wherein the manager application uses a request Service Access Point (SAP) for 
requests and responses. 

60. (Previously presented) A carrier medium, comprising program instructions 
for network management, wherein the program instructions are computer-executable to 
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perform: 



sending an identity of a user of a manager application to a gateway, wherein the 
gateway is configurable to communicate with the manager application 
through a platform-independent interface; 

determining on a managed object level whether or not the manager application is 
allowed to receive an event generated by one of a plurality of managed 
objects or to send a request to the one of the plurality of managed objects 
as a function of the identity of the user of the manager apphcation, 
whereby access for the manager application to receive the event or send 
the request is approved or denied for said one of the plurality of managed 
objects at the individual object level so that the manager application is 
granted access to one of the plurality of managed objects while being 
prevented from interfacing with a different one of the plurality of managed 
objects; and 

delivering the event to the manager application or the request to the managed 
object if the manager access is approved; 

wherein the manager application uses a request Service Access Point (SAP) for 
requests and responses. 

61. (Currently amended) A network management system, comprising: 

a gateway which is coupled te -between a plurality of managed objects and a 
plurality of proxy agent managers: and which is configured to deliver 
events generated by the managed objects to one or more managers er ^id 
to deliver requests generated by the managers to one or more of the 
managed objects , wherein each of the events and each of the requests 
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include a user identification, wherein the user identification identifies the 
respective manager to which the event or the request belongs ; 

a platform-independent interface to the gateway, wherein the gateway is 
configurable to communicate with the managers through the platform- 
independent interface to deliver the events or requests , wherein the 
managers share a singleton Request Service Access Point (Request SAP) 
object : 

wherein the gateway is configurable to provide object-level access control 
between the managers and the managed objects to receive the events from 
or to send the requests to the managed objects, wherein said object-level 
access control is provided by the Request SAP object at the individual 
object level so that one of the managers is granted access to one of the 
managed objects while being prevented fi-om interfacing with a different 
one of the managed objects^mid 

wh e r e in the gateway uses a singl e ton SAP object that shar e s all ProxyAg e nts 
through which a manag e r d e als with a manag e d obj e ct and allows th e 
ins e rtion of the user nam e in tho request messag e to e nforc e object l e v e l 
access control 

62. (Currently amended) A network management method, comprising: 

sending an identity of a user of a manager application to a gateway, wherein the 
gateway is configurable to communicate with the manager application 
through a platform-independent interface , wherein the gatewav is coupled 
between a plurality of managed objects and the manager application : 

determining on a managed object level whether or not the manager application is 
allowed to receive an event generated by one of a plurality of managed 
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objects or to send a request to the one of the plurahty of managed objects 
as a function of the identity of the user of the manager appHcation, 
wherein the event and the request include a user identification, wherein the 
user identification identifies the manager appHcation to which the event or 
the request belongs; 

whereby access for the manager application to receive the event or send the 
request is approved or denied for said one of the plurality of managed 
objects bv a singleton Request Service Access Point (Request SAP) at the 
individual object level so that the manager application is granted access to 
one of the plurality of managed objects while being prevented from 
interfacing with a different one of the plurality of managed objects; and 

delivering the event to the manager application or the request to the managed 
object if the manager access is appro vedr^id 

wherein th e gateway us e s a singleton SAP object that shar e s all ProxyAgents 
through which the manager deals with a manag e d obj e ct and allows th e 
insertion of the user nam e in th e request message to e nforc e object l e v e l 
acc e ss control 

63. (Currently amended) A carrier medium, comprising program instructions for 
network management, wherein the program instructions are computer-executable to 
perform: 

sending an identity of a user of a manager application to a gateway, wherein the 
gateway is configurable to communicate with the manager application 
through a platform-independent interface , wherein the gatewav is coupled 
between a plurality of managed objects and the manager application ; 
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determining on a managed object level whether or not the manager application is 
allowed to receive an event generated by one of a plurality of managed 
objects or to send a request to the one of the plurality of managed objects 
as a function of the identity of the user of the manager application, 
wherein the event and the request include a user identification, wherein the 
user identification identifies the manager application to which the event or 
the request belongs; 

whereby access for the manager application to receive the event or send the 
request is approved or denied for said one of the plurality of managed 
objects by a singleton Request Service Access Point (Request SAP) at the 
individual object level so that the manager application is granted access to 
one of the plurality of managed objects while being prevented from 
interfacing with a different one of the plurality of managed objects; and 

delivering the event to the manager application or the request to the managed 
object if the manager access is appro vedf-^id 

wh e r e in the gat e way uses a singleton SAP obj e ct that shares all ProxyAg e nts 
through which th e manager deals with a managed obj e ct and allows th e 
insertion of th e us e r nam e in the request m e ssag e to enforce obj e ct l e v e l 
access control 
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